This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json) Hash identifier: YuCZ2DGUFAN4cPTVtBUKy5/nJDQC7XAjZ/oViAkn17k= Subject key identifier: C4:0D:2E:A6:BD:A3:EE:C8:B4:5C:EF:1C:6A:A4:DC:BC:8F:8E:62:48 Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08 Certificate serial: 019B3FB60C1173C8572255E96A8E93CA97F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft Manifest number: 0290 Signing time: Sun 21 Dec 2025 07:00:53 +0000 Manifest this update: Sun 21 Dec 2025 07:00:53 +0000 Manifest next update: Mon 22 Dec 2025 07:00:53 +0000 Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: Hu3kcFSDhj9B2T0KU1CPetEBxVSJTFa+Nr2wQJtg4+M=) 2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:0c:11:73:c8:57:22:55:e9:6a:8e:93:ca:97:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08 Validity Not Before: Dec 21 07:00:53 2025 GMT Not After : Dec 22 07:00:53 2025 GMT Subject: CN=c40d2ea6bda3eec8b45cef1c6aa4dcbc8f8e6248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:32:b3:90:c2:f6:6a:64:c5:80:d4:0d:71: 89:0b:f0:13:62:31:32:53:af:62:d2:d0:80:f5:6c: 75:f8:83:85:4d:45:fa:2f:cb:17:5e:0f:3d:27:1a: f4:2e:4e:94:2f:73:5e:52:1a:85:c3:46:06:2a:1b: ec:8c:1b:8c:af:b4:46:53:0f:3a:50:18:5f:22:f1: aa:38:a8:9e:4f:1b:5b:60:c5:aa:6c:45:09:b0:95: 67:b9:fb:44:3e:d0:b1:33:fc:b5:79:1f:8b:49:3b: 80:3a:21:7c:a2:87:17:87:81:8e:1f:15:be:55:b8: 35:73:71:8b:97:39:5e:44:00:26:b8:fc:82:2f:fe: 7f:0b:f1:14:01:99:3e:88:2e:9b:2d:e5:d7:e7:7f: 79:60:6b:fd:50:a6:80:23:b4:9e:a8:23:7b:01:28: d2:b2:33:00:32:17:87:f2:7b:9d:54:9b:ef:79:f2: 88:36:a7:4c:7b:af:a9:4e:76:01:99:e0:48:a9:28: 5d:f7:94:09:b0:10:78:7f:f7:91:db:32:f2:df:1e: b0:cd:41:c2:c9:f6:79:98:cf:40:19:5a:cc:d4:8c: a8:43:2e:1e:13:3e:cd:cf:7f:50:56:b9:a3:13:4c: 17:9f:47:5d:c9:e5:63:f5:c0:0f:b2:13:ed:3d:bc: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:2E:A6:BD:A3:EE:C8:B4:5C:EF:1C:6A:A4:DC:BC:8F:8E:62:48 X509v3 Authority Key Identifier: keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:25:9b:2c:cb:22:d1:85:97:7c:62:7a:47:50:f7:f4:0f:0f: 31:37:51:6f:c5:c1:5b:d2:8f:04:5d:a0:83:05:50:75:34:0b: c0:fd:a5:06:18:3e:b3:93:02:ce:ab:28:b5:59:7b:c1:e7:cc: 7e:e9:b4:27:fa:ee:b4:b8:46:ee:14:97:cb:2d:4f:2d:8d:fd: c3:9a:7a:7c:fc:f0:bf:24:b8:3a:2a:04:82:ae:a2:48:4a:c0: 95:50:a0:f8:62:f0:4b:85:11:0b:28:20:3c:4a:a4:d5:03:6a: 1d:ba:29:50:86:65:c2:67:83:d5:5d:c7:50:50:cc:1f:92:fb: 4c:4b:dd:54:3e:33:ff:d2:04:8f:70:d3:7b:e9:91:6c:f7:91: 6b:84:bd:ea:2d:e9:98:a9:e7:a9:54:f5:4f:12:a0:fd:b6:55: af:57:ab:70:02:7b:03:9d:7e:82:df:8e:d0:39:e0:80:b8:9a: b3:ab:18:b1:4d:33:fd:d4:1e:66:44:04:08:3f:24:16:1d:da: 93:50:1f:c4:38:52:82:0c:d1:8c:b8:b2:7b:1a:ce:bd:27:7c: ca:23:da:14:36:c7:92:d2:b0:9a:22:55:07:57:31:bd:24:66: f1:f4:f0:fa:67:a3:8c:3b:d0:2f:7b:99:c6:5a:7a:ca:4c:bd: 9f:9e:c4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgwRc8hXIlXpao6TypfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5 NjZjMDgwHhcNMjUxMjIxMDcwMDUzWhcNMjUxMjIyMDcwMDUzWjAzMTEwLwYDVQQD EyhjNDBkMmVhNmJkYTNlZWM4YjQ1Y2VmMWM2YWE0ZGNiYzhmOGU2MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SIys5DC9mpkxYDUDXGJC/ATYjEy U69i0tCA9Wx1+IOFTUX6L8sXXg89Jxr0Lk6UL3NeUhqFw0YGKhvsjBuMr7RGUw86 UBhfIvGqOKieTxtbYMWqbEUJsJVnuftEPtCxM/y1eR+LSTuAOiF8oocXh4GOHxW+ Vbg1c3GLlzleRAAmuPyCL/5/C/EUAZk+iC6bLeXX5395YGv9UKaAI7SeqCN7ASjS sjMAMheH8nudVJvvefKINqdMe6+pTnYBmeBIqShd95QJsBB4f/eR2zLy3x6wzUHC yfZ5mM9AGVrM1IyoQy4eEz7Nz39QVrmjE0wXn0ddyeVj9cAPshPtPbw8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQNLqa9o+7ItFzvHGqk3LyPjmJIMB8GA1UdIwQY MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct YzBkY2NkYjdhOTA1LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1 LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyWbLMsi 0YWXfGJ6R1D39A8PMTdRb8XBW9KPBF2ggwVQdTQLwP2lBhg+s5MCzqsotVl7wefM fum0J/rutLhG7hSXyy1PLY39w5p6fPzwvyS4OioEgq6iSErAlVCg+GLwS4URCygg PEqk1QNqHbopUIZlwmeD1V3HUFDMH5L7TEvdVD4z/9IEj3DTe+mRbPeRa4S96i3p mKnnqVT1TxKg/bZVr1ercAJ7A51+gt+O0DnggLias6sYsU0z/dQeZkQECD8kFh3a k1AfxDhSggzRjLiyexrOvSd8yiPaFDbHktKwmiJVB1cxvSRm8fTw+mejjDvQL3uZ xlp6yky9n57EHw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:47:46 2025 by rpki-client